CyberRota Analysis
AI-GeneratedA race condition vulnerability in Apache Tomcat Native allows for the downgrading of client certificate verification requirements in certain configurations, potentially exposing sensitive data to unauthorized access. This high-severity issue impacts versions 2.0.0 through 2.0.15 and 1.3.0 through 1.3.8, with unsupported versions also potentially affected. Organizations using these versions should prioritize upgrading to 2.0.16 or 1.3.9 to mitigate the risk.
Original NVD Description
Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected. Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)